HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.


All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: 28 Sep 2009 10:16 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
This weekend I made some tests with phising sites and found they were not blocked!
One example testpage: http://www.mozilla.com/firefox/its-a-trap.html
Output:
Code:
28/09/2009 09:10:52 127.0.0.1 GET 200 http://www.mozilla.com/img/tignish/template/header-background.png 475+545 VIRUS ClamAV: Sanesecurity.Rogue.295.UNOFFICIAL

But the site was not blocked.
What's the reason about?
Clamav is also finding a virus:
Code:
clamdscan -v header-background.png
/root/clam-test/header-background.png:Sanesecurity.Rogue.295.UNOFFICIAL FOUND


regards


Top
 Profile  
 
PostPosted: 30 Sep 2009 08:07 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
It does what it's supposed to. It's blocking the IMAGE that's supposedly a virus. There is no way you can block a complete page based on that.


Top
 Profile  
 
PostPosted: 30 Sep 2009 08:56 
Offline

Joined: 23 Apr 2008 09:36
Posts: 101
O.K., I understand the difference ...
Thank you very much!

regards


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group